Firewall service includes network based firewalls that are capable of providing network security protection for large or complex deployments. These firewalls are highly scalable and can also include virtual versions as options depending on specific vendor capabilities.
Similarly deployment options for these devices include the data center, network edge or branch offices. So Next-generation firewalls will often include capabilities such as application or user based policies, threat detection via intelligence feeds as well as traditional IPS methods, SSL based VPN’s, and sandboxing.